For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked. https://www.puppet.com/security/cve/cve-2023-5255-denial-service-revocation-auto-renewed-certificates